HP CIFS Server and Kerberos

100
As we know from our other data collection, the HP CIFS Server enctype is MD5. Here, kerbtray shows
the enctype for the ticket and the key to be MD5.
Kerbtray is easy to download from Microsoft and install. The Microsoft website is:
http://www.microsoft.com/downloads/details.aspx?FamilyID=4e3a58be-29f6-49f6-85be-
e866af8e7a88&displaylang=en
This data will be especially useful in troubleshooting cases where the ADS schema is customized, and
where principals are manually added (not necessarily from Samba net tool).
8.1.9 Klist (Windows client)
Klist.exe is a Microsoft Windows tool that runs on the client and allows the user to purge (or delete)
their tickets. It also displays the ticket cache – but kerbtray is a much better utility for doing that
task.
Purging the ticket cache is useful when troubleshooting. A client Kerberos ticket has a lifetime
associated with it, and in a duplication effort, the client may not be requesting a new ticket on
subsequent transactions if the lifetime has not expired (the default lifetime is 10 hours). To purge the
ticket cache and force the client to request a new ticket, run klist.exe. Here is a typical dialogue,
where the klist options are <tgt | tickets | purge>
The TGT option displays the cached ticket-granting-ticket for the session.